| Age | Commit message (Expand) | Author | Lines |
| Load auth libraries only when a request needs one | Bryce Kwon | -12/+20 |
| Say which hash kinds each system's crypt checks | Bryce Kwon | -4/+27 |
| Spend a missing account's login on a real hash | Bryce Kwon | -21/+31 |
| Turn down passwords past 256 bytes unchecked | Bryce Kwon | -2/+10 |
| Read the auth cookie in linear time | Bryce Kwon | -14/+42 |
| Offer avatars at twice the size to dense screens | Bryce Kwon | -14/+22 |
| Hash avatar addresses with SHA-256 | Bryce Kwon | -6/+7 |
| Mark avatar icons as decorative | Bryce Kwon | -8/+6 |
| Unwrap an avatar address in linear time | Bryce Kwon | -6/+12 |
| Draw no avatar when luaossl is missing | Bryce Kwon | -6/+8 |
| Drop the table loop's dead blank-line test | Bryce Kwon | -1/+1 |
| Add blame to the source filter and line number docs | Bryce Kwon | -6/+6 |
| Name every trailer link-trailers.lua links | Bryce Kwon | -3/+3 |
| Fix the sample cgitrc's defaults and value syntax | Bryce Kwon | -13/+16 |
| Describe root-readme as the site's about page | Bryce Kwon | -5/+5 |
| Name the log link that enable-index-links adds | Bryce Kwon | -1/+1 |
| Give readme headings anchors like GitHub's | Bryce Kwon | -1/+36 |
| Keep underscores inside words out of emphasis | Bryce Kwon | -4/+9 |
| Let character references through to the browser | Bryce Kwon | -2/+17 |
| Honour backslash escapes in readmes | Bryce Kwon | -1/+3 |
| Link the urls and addresses in angle brackets | Bryce Kwon | -1/+18 |
| Keep a wrapped list item in its list | Bryce Kwon | -8/+20 |
| Let a table cut a paragraph short | Bryce Kwon | -2/+15 |
| Run a paragraph's lines together like GitHub | Bryce Kwon | -10/+33 |
| Leave images and badges out of rendered readmes | Bryce Kwon | -21/+28 |
| Lead a readme's relative links into the tree | Bryce Kwon | -6/+55 |
| Trim readme lines in linear time | Bryce Kwon | -2/+26 |
| Keep the age hook's directory group writable | Bryce Kwon | -2/+11 |
| Keep the cache hook's rm errors from pushers | Bryce Kwon | -4/+4 |
| Trim avatar addresses in linear time | Bryce Kwon | -2/+30 |
| Refuse every repository when auth-file loses repos | Bryce Kwon | -11/+14 |
| Mark a page behind an auth filter private | Bryce Kwon | -14/+15 |
| Keep clone files and oversized responses out of the cache | Bryce Kwon | -0/+5 |
| Gate html serving behind trust-scan-config | Bryce Kwon | -3/+3 |
| Rename enable-trailers to enable-commit-trailers | Bryce Kwon | -11/+12 |
| Unify the docs, samples and extensions | Bryce Kwon | -207/+236 |
| Harden the request path, scan and error recovery | Bryce Kwon | -6/+6 |
| Gate scanned filters with `trust-scan-filters` | Bryce Kwon | -18/+16 |
| Apply the mailmap at HEAD to every ident | Bryce Kwon | -0/+9 |
| Add the link-trailers extension | Bryce Kwon | -0/+109 |
| Split trailers out of the commit message | Bryce Kwon | -0/+19 |
| Clean up the whole tree | Bryce Kwon | -84/+43 |
| Give the login inputs explicit field types | Bryce Kwon | -2/+2 |
| Refresh the server configs and drop `unsafe-inline` | Bryce Kwon | -94/+71 |
| Trim the comments and dead code across the tree | Bryce Kwon | -297/+203 |
| Rename the inconsistent config keys | Bryce Kwon | -120/+129 |
| Remove the language breakdown from the stats page | Bryce Kwon | -2/+2 |
| Replace `nbsp` spacing with CSS | Bryce Kwon | -4/+4 |
| Document cache directory ownership | Bryce Kwon | -1/+3 |
| Refuse unknown and spoofed hostnames in nginx.conf | Bryce Kwon | -0/+31 |